Huge Security Flaw Discovered in Windows 10

Huge Security Flaw Discovered in Windows 10

Naturally, the flaw could allow hackers to steal passwords

 

The Daily Mail reported that a Google researcher discovered a huge security flaw in Windows 10 that could have allowed hackers to steal the passwords of thousands of users.

For around eight days this month, some versions of the operating system shipped with a password manager with a massive security flaw. The bug meant cybercriminals could easily take the passwords stored in the third-party app and use them to break into people's online accounts.

John Steven, senior director of software security at Synopsys, said: "Rather than defeating the underlying encryption that protects users’ credentials, many of these vulnerabilities attack password (PW) managers’ interfaces or the APIs that connect them and the browser they service. Security practitioners  advise users to use PW management plugins rather than visiting the PW manager’s website in order to avoid the classic AppSec vulnerabilities in those web interfaces. Yet, Tavis discovered the latest vulnerability in the supposedly safer plugin.

"PW managers will continue to be vulnerable to these kinds attacks, whether their users engage them as websites or plugins because of how they’re designed to work. PW managers need to be able to observe both data about the URL being visited as well as the structure of the page and its forms. They do this in order to facilitate matching the applicable credentials and then, per settings, auto-fill these forms for the user. This sensing/filling demands parsing and parsing has long been an Achilles heel of product security – a vector through which attacks can introduce malware and take control of an application.

"Alternative approaches, such as LastPass on Apple’s iPad, do not have this level of integration. In this scenario, the user must switch between the application in which they’re authenticating and the separate LastPass mobile app. The user cuts/pastes their credentials between the two. This compartmentalisation disallows the kinds of exploitation we’re seeing time-and-time-again, but at a high cost to convenience."

Comments

Post a Comment

Popular posts from this blog

7 free alternatives to Microsoft Office you can consider

Image
  7 free alternatives to Microsoft Office you can consider Microsoft Office is one of the most-popular productivity suites globally. It is used by companies worldwide for spreadsheets, Word, PowerPoint and more. However, it really does not come cheap. if you are are looking for some more affordable/free alternatives, here are seven that you can look at:   Google Workspace Google Workspace is one of the most popular alternatives to Microsoft Office. It is free and offers users 15GB of cloud storage for storing files, mails, attachments and more. Workspace includes several Google apps and services including Google Docs, Sheets, Slides as an alternative to Word, Excel and Powerpoint. It also includes Google Drive, alternative for Microsoft OneDrive.   iWork is another good free alternative to Microsoft Office, but it is best suited for Apple users (Mac, iPhone and iPad). There’s a web-version too, but it has limited functionality. In terms of Apple iWork offers Pages, Number...
Read more

Meet Chrome OS Flex, Google's new way for Desktop Computing

Image
 Meet Chrome OS Flex, Google's new way for Desktop Computing Is that an old Windows system or a current Chrome OS computer? Google's getting ready to blur the lines of desktop computing in some seriously shape-shifting ways.   Google's Chrome OS platform has come a ridiculously long way in an incredibly short time. Back when it launched in 2010 , Chrome OS truly was just a browser in a box — a dead-simple operating system designed to act as a portal to the web and not much more. The software had no desktop, no task bar, and barely even anything in the way of settings. It was essentially just a full-screen browser window — and that's it. Fast-forward to 2022, and Chrome OS is a fully featured and impressively polished computing solution. Between the platform's ongoing expansion and the rapid evolution in how we all use computers, Chromebooks are now a genuinely practical and often advantageous option for business, personal, and education-related use. Th...
Read more